$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/250619a1-8b1c-39e2-875b-2bd08ae4e72b.roa File: 250619a1-8b1c-39e2-875b-2bd08ae4e72b.roa (raw, json) Hash identifier: n1i0awhav2aI2PYvM1DMswCBV/SPOwJmJp85ovAYSNg= Subject key identifier: 4F:3D:F0:70:88:9C:B0:3B:99:66:5F:9C:CD:7D:97:F4:54:D0:A4:21 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F480D41328730DFE657D1CC80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/250619a1-8b1c-39e2-875b-2bd08ae4e72b.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 834 IP address blocks: 68.164.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:41:32:87:30:df:e6:57:d1:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=f1d3d6be-429f-4b31-bc23-aeae3474fbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bc:3d:e1:ac:a3:d2:20:61:aa:5b:34:e3:58: 06:8f:f1:05:09:32:e2:8d:9e:bb:54:4f:46:61:ed: 6f:3a:7a:c3:56:50:d6:b0:b2:69:f9:14:08:f5:e6: 64:fe:21:4a:ae:53:97:9e:7f:77:24:bd:d5:14:bc: 56:f9:8d:29:0e:eb:97:b3:b7:6e:50:36:8f:70:52: 65:04:00:0f:03:0c:9b:d1:d0:31:96:21:05:b7:fd: 25:75:43:e1:01:15:13:eb:8a:fc:eb:a3:b4:d8:69: 21:b8:ba:fc:28:04:7d:5c:1f:bd:cf:92:00:26:4d: cc:66:b2:df:b0:18:91:a4:ee:5d:9f:0a:31:c0:b1: 24:89:62:c8:67:9c:d7:c1:0a:9e:22:a9:8a:fb:d6: 2c:7a:4f:4d:87:9c:4e:6f:52:16:53:3b:e8:52:fc: f2:4c:9c:71:a9:3c:43:04:d8:c0:33:cf:07:12:c7: 16:5f:54:81:3c:fe:c8:69:16:1f:a7:2e:d4:5c:a7: 79:a2:52:30:a5:63:68:3f:31:12:e7:51:b5:86:6b: c7:75:84:32:73:c3:7b:cb:d7:06:52:ea:bb:85:8a: 17:bd:22:45:09:e7:d6:d6:f0:75:6e:d7:42:ef:e5: 9c:7c:60:3e:a2:49:99:85:30:a2:48:0a:59:db:f3: dc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3D:F0:70:88:9C:B0:3B:99:66:5F:9C:CD:7D:97:F4:54:D0:A4:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/250619a1-8b1c-39e2-875b-2bd08ae4e72b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:f4:a3:fb:74:1d:2e:c8:7d:2b:9b:0f:8e:90:0d:e2:da:4d: f1:9a:b1:93:88:83:cb:ba:fe:05:6a:6e:20:87:60:c3:87:bc: e4:ce:25:35:ef:8b:34:6c:c5:26:35:47:d3:8b:23:a7:1f:6c: 67:b9:90:a5:04:5f:d4:e5:79:b9:10:89:54:36:c2:5f:ad:d7: 25:da:15:ed:24:34:01:1a:42:96:5a:24:7d:1e:fb:7f:c5:70: 85:c4:94:1f:eb:8a:33:be:94:cf:a4:65:cf:c8:93:91:ef:a6: 32:9d:9c:df:ca:c7:82:36:84:cc:33:55:0b:21:49:39:cb:a6: 1e:a0:d9:93:c4:28:5e:0d:7e:1f:5e:f5:45:d0:b8:c8:be:93: 40:6d:b7:72:65:4b:e9:5e:ce:a3:6f:bc:81:5c:e2:2f:b3:e2: ab:4d:19:3c:76:e7:80:a5:8e:f7:9d:a2:f5:70:11:ff:7e:70: a3:e3:e7:0e:b1:8a:e7:33:2f:10:0b:fa:fb:b6:04:71:19:08: f5:7b:be:b0:94:c4:f9:1b:e5:31:ef:b5:b5:51:2e:4e:4f:15: 6d:d7:0f:26:c0:cb:a9:08:f0:93:ee:e8:94:7e:5b:1a:4d:4d: 3d:72:c8:27:e1:f3:3e:bc:44:22:4c:39:ea:19:9c:a2:d6:09: 55:b5:5e:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDUEyhzDf5lfRzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZjFkM2Q2YmUtNDI5Zi00YjMxLWJjMjMtYWVhZTM0NzRmYmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rw94ayj0iBhqls041gGj/EFCTLijZ67VE9G Ye1vOnrDVlDWsLJp+RQI9eZk/iFKrlOXnn93JL3VFLxW+Y0pDuuXs7duUDaPcFJl BAAPAwyb0dAxliEFt/0ldUPhARUT64r866O02GkhuLr8KAR9XB+9z5IAJk3MZrLf sBiRpO5dnwoxwLEkiWLIZ5zXwQqeIqmK+9Ysek9Nh5xOb1IWUzvoUvzyTJxxqTxD BNjAM88HEscWX1SBPP7IaRYfpy7UXKd5olIwpWNoPzES51G1hmvHdYQyc8N7y9cG Uuq7hYoXvSJFCefW1vB1btdC7+WcfGA+okmZhTCiSApZ2/PcYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE898HCInLA7mWZfnM19l/RU0KQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjUwNjE5YTEtOGIxYy0z OWUyLTg3NWItMmJkMDhhZTRlNzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRKQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJr0o/t0HS7IfSubD46QDeLaTfGasZOIg8u6/gVqbiCHYMOHvOTOJTXv izRsxSY1R9OLI6cfbGe5kKUEX9TlebkQiVQ2wl+t1yXaFe0kNAEaQpZaJH0e+3/F cIXElB/rijO+lM+kZc/Ik5HvpjKdnN/Kx4I2hMwzVQshSTnLph6g2ZPEKF4Nfh9e 9UXQuMi+k0Btt3JlS+lezqNvvIFc4i+z4qtNGTx254CljvedovVwEf9+cKPj5w6x iuczLxAL+vu2BHEZCPV7vrCUxPkb5THvtbVRLk5PFW3XDybAy6kI8JPu6JR+WxpN TT1yyCfh8z68RCJMOeoZnKLWCVW1Xt0= -----END CERTIFICATE-----Generated at Tue Sep 29 20:00:52 2026 by rpki-client